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AMENDMENTS TO THE CLAIMS 

1 . (Currently amended) A method for secure mutual authentication comprising the steps of: 
authenticating a customer at a first web site; 

after authentication, receiving a selection from said customer at said first web site requiring 
transfer to a second web site, wherein said first web site is independent of said second web site; 

after receiving said selection g enerating an authentication message for said customer at said 
first web site, said authentication message devoid of intelligent information of said customer and 
comprising a permanent customer pseudonym that uniquely identifies said customer and is devoid 
of intelligent information of said customer; and 

after generating said auth entication message, t ransferring said authentication message from 
said first web site to said second web site for authentication of said customer by said second web 
site. 



2. (canceled). 



3. (previously presented) The method of claim 1, wherein the step of generating an 
authentication message further comprises randomly generating said customer pseudonym. 

4. (previously presented) The method of claim 1, wherein the step of generating an 
authentication message further comprises incorporating a date/time stamp, a partner name and an 
optional uniform resource locator (URL) with a return address for said first web site into said 
authentication message. 

5. (original) The method of claim 1 , wherein the step of generating an authentication 
message comprises incorporating a source identifier, a date/time stamp, an optional return URL, a 
customer pseudonym, a cryptographic key, a transaction identification and authenticated data for the 

first web site into said authentication message. 
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6. (original) The method of claim 5, wherein said authenticated data comprises said 
date/time stamp, said optional return URL, said customer pseudonym, said transaction 
identification, and a partner name. 



7. (original) The method of claim 1 , furtlier comprising the step of authenticating said 
customer at said second web site using said authentication message generated by said first web site. 

8. (original) A computer for performing the method of claim 1 . 

9. (original) A computer-readable medium having software for performing the method 
of claim L 



10. (previously presented) A method for swure mutual authentication comprising the 

steps of: 

receiving at a second web site an authentication message for a customer from a first web 
site, said customer previously authenticated by said first web site* said authentication message 
generated by said first web site, said authentication message devoid of intelligent information of 
said customer and comprising a permanent customer pseudonym that uniquely identifies said 
customer and is devoid of intelligent information of said customer, and 

authenticating said customer at said second web site using said authentication message 
generated by said first web site; 

wherein said first web site is independent of said second web site. 

1 1 . (original) The method of claim 10, wherein the step of authenticating said customer 
at said second web site occurs when said customer has previously visited said second web site, and 
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farther comprising the step of prompting said customer to log in to said second web site when said 
customer has not previously visited said second web site. 

1 2. (original) The method of claim 1 0, wherein said authentication message comprises a 
uniform resource locator (URL) with a return address for said first web site, and further comprising 
the step of returning said customer from said second web site to said first web site using said URL 
without further authentication by said first web site. 



13. (original) The method of claim 10, further comprising the step of generating said 
authentication message for said customer at said first web site. 

14. (original) A computer for performing the method of claim 10. 

1 5. (original) A computer-readable medium having software for performing the method 
of claim 10. 

1 6. (previously presented) A computer system for secure mutual authentication 
comprising a first web site and a second web site, wherein said first web site is independent of said 
second web site; 

said first web site to authenticate a customer, receive a selection from said customer 
requiring transfer to said second web site, generate an authentication message, and transfer said 
authentication message from said first web site to said second web site, said authentication message 
devoid of intelligent information of said customer and comprising a permanent customer 
pseudonym that uniquely identifies said customer and is devoid of intelligent information of said 
customer; and 

said second web site to receive said authentication message for said customer from said first 
web site and authenticate said customer using said authentication message generated by said first 
web site. 
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